Privacy Policy
Last updated: January 15, 2026.
Qorelta d.o.o. (hereinafter: "we", "us" or "our") respects the privacy of all visitors to the website qorelta.com. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and applicable Croatian legislation.
Data controller
Qorelta d.o.o., Ilica 47, 10000 Zagreb, Croatia. OIB: 73928461052. Email for data protection inquiries: privacy@qorelta.com.
Data we collect
We collect data that you voluntarily provide through the contact form on our website: full name, email address, and message content. We also automatically collect technical data such as IP address, browser type, operating system, access time, and pages visited — solely for the purpose of website functionality and analytics (with your consent).
Purpose and legal basis of processing
We process your data based on the following legal grounds: (a) Consent (Art. 6(1)(a) GDPR) — for the use of analytical and marketing cookies; (b) Legitimate interest (Art. 6(1)(f) GDPR) — for responding to your inquiries and improving our services; (c) Legal obligation (Art. 6(1)(c) GDPR) — when processing is necessary to fulfill legal requirements.
Cookies and tracking technologies
We use Google Consent Mode v2 to manage consent. Analytical and marketing cookies are activated only after you give explicit consent through the cookie banner. More detailed information is available in our Cookie Policy.
Sharing data with third parties
We do not sell your personal data to third parties. We may share data with: analytics service providers (Google Analytics) — only with your consent; competent authorities — when legally required; IT infrastructure providers — under strict confidentiality agreements.
Data retention period
We retain data from the contact form for a maximum of 12 months from receipt of inquiry, unless a legal obligation requires longer retention. Consent data is kept for 24 months from the date consent was given, after which renewal is requested.
Your rights
Under GDPR, you have the right to: access your personal data; rectify inaccurate data; erase data ("right to be forgotten"); restrict processing; data portability; object to processing; withdraw consent at any time. To exercise your rights, contact us at: privacy@qorelta.com.
Data security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or damage, including SSL/TLS encryption for data transmission and restricted access to data only by authorized personnel.
Changes to the Privacy Policy
We reserve the right to update this Privacy Policy. All changes will be published on this page with an updated date. We recommend regularly reviewing this page.
Right to complaint
If you believe that the processing of your personal data is not in accordance with GDPR, you have the right to file a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr.